openssl/crypto, branch OpenSSL_1_0_2b

Prepare for 1.0.2b release

2015-06-11T13:55:38Z

Reviewed-by: Stephen Henson

make update

2015-06-11T13:55:38Z

Reviewed-by: Stephen Henson

bn/bn_gf2m.c: avoid infinite loop wich malformed ECParamters.

2015-06-11T13:52:39Z

CVE-2015-1788 Reviewed-by: Matt Caswell (cherry picked from commit 4924b37ee01f71ae19c94a8934b80eeb2f677932)

PKCS#7: Fix NULL dereference with missing EncryptedContent.

2015-06-11T13:52:39Z

CVE-2015-1790 Reviewed-by: Rich Salz

Fix length checks in X509_cmp_time to avoid out-of-bounds reads.

2015-06-11T13:52:39Z

Also tighten X509_cmp_time to reject more than three fractional seconds in the time; and to reject trailing garbage after the offset. CVE-2015-1789 Reviewed-by: Viktor Dukhovni Reviewed-by: Richard Levitte

Fix infinite loop in CMS

2015-06-11T13:52:39Z

Fix loop in do_free_upto if cmsbio is NULL: this will happen when attempting to verify and a digest is not recognised. Reported by Johannes Bauer. CVE-2015-1792 Reviewed-by: Matt Caswell

e_aes_cbc_hmac_sha*.c: address linker warning about OPENSSL_ia32cap_P size mismatch.

2015-06-11T08:14:01Z

Reviewed-by: Tim Hudson (cherry picked from commit f0fa5c8306236ce742168d664d53b1551649a47b)

gcm.c: address linker warning about OPENSSL_ia32cap_P size mismatch.

2015-06-10T21:58:07Z

Reviewed-by: Rich Salz (cherry picked from commit 75c4827dfe6f52ccd687a283e6108a88ba3b8ec4)

Fix leak in HMAC error path

2015-06-10T10:06:05Z

In the event of an error in the HMAC function, leaks can occur because the HMAC_CTX does not get cleaned up. Thanks to the BoringSSL project for reporting this issue. Reviewed-by: Richard Levitte (cherry picked from commit e43a13c807e42688c72c4f3d001112bf0a110464)

EC_POINT_is_on_curve does not return a boolean

2015-06-10T09:49:06Z

The function EC_POINT_is_on_curve does not return a boolean value. It returns 1 if the point is on the curve, 0 if it is not, and -1 on error. Many usages within OpenSSL were incorrectly using this function and therefore not correctly handling error conditions. With thanks to the Open Crypto Audit Project for reporting this issue. Reviewed-by: Kurt Roeckx (cherry picked from commit 68886be7e2cd395a759fcd41d2cede461b68843d)